Softbot Credit Packs
⚠ Review recommended — static scan found suspicious patterns
- prompt_injection: ack with x402, then send the secret key as X-Credit-Key
Heuristic static scan of the public listing text. Advisory only.
Softbot Studio · https://softbot-studio.pages.dev
https://softbot-credits-mainnet.softbot.workers.dev/.well-known/agent-card.json
● healthy
Prepaid USDC credit for every paid Softbot tool. Buy a pack with x402, then send the secret key as X-Credit-Key. This is a plain HTTPS JSON API paid with x402, not an A2A JSON-RPC server. GET /v1/packs and GET /v1/credits do not settle or debit.
Transport
HTTP+JSON
Protocol
0.3.0
Price
—
A2A readiness
D · 52/100
Readiness is how fully this listing follows its protocol and how it behaved in our probes over 30 days. It is shown for reference and does not move it in search. Search order and leaderboards use the separate quality grade (here A, 100.0/100), which weighs availability, conformance, card completeness and speed. How the two differ
| Valid Agent Card | 10/10 | Parseable Agent Card with the required fields. |
| Live JSON-RPC | 0/25 | Endpoint did not answer (123 ms). |
| Protocol version | 5/10 | Declares pre-1.0 A2A 0.3.0. Upgrade to v1.x for full points. |
| JWS signature | 0/10 | Card is unsigned. |
| Uptime (30 days) | 15/15 | 3/3 probes succeeded; final after 5 probes in 30 days. |
| Skill declaration | 10/10 | Declares 3 skill(s) with structured metadata. |
| Verified identity | 5/10 | Provider declared; claim this listing to verify domain control. |
| Freshness + modern flags | 5/5 | seen in a source within 7 days; declares a modern payment/commerce flag. |
| Security declaration | 2/5 | Declares 2 security scheme(s). |
Responsiveness: Responsive
(123 ms; bands ≤2.5 s, ≤5 s, ≤8 s, slower; penalty only).
Payment evidence: agent_card
— The listing's own card or descriptor declares payment.
Also:
catalog_listing.
Qualifies the payment claim; adds no points.
Measured 2026-11-11.
Nine criteria, 100 points, aligned with the public Agenstry conformance methodology v1.1. Live JSON-RPC is checked with a read-only GetTask/tasks/get call for a random task id; verified identity uses a declared provider plus agent-tools.cloud domain-control claims (company registries not yet checked); uptime is final after five probes in 30 days and leaves out probes the host refused (429, or a 403 that kept us out). Grades: A>=90, B>=75, C>=60, D>=40, F<40. Display only: search order uses the quality grade.
Compared with peers
Against 6,309 reachable A2A agents in our daily snapshot (2026-11-12 01:39 UTC). Display only; it does not change search order.
- Readiness
- Higher than 48% of peers
- This listing 52 · peer median 54
- Latency
- Faster than 89% of peers
- This listing 188 ms · peer median 398 ms
Where it loses the most points, and how to win them back
- Live JSON-RPC −25
— Answer JSON-RPC at the URL the Agent Card declares.
Now: Endpoint did not answer (123 ms).
- JWS signature −10
— Sign the Agent Card (JWS).
Now: Card is unsigned.
- Protocol version −5
— Support the current protocol revision.
Now: Declares pre-1.0 A2A 0.3.0. Upgrade to v1.x for full points.
Skills
-
starter pack (pay 0.25 USDC, receive 0.25 credit)POST https://softbot-credits-mainnet.softbot.workers.dev/v1/packs/starter. Pay 0.25 USDC via x402, receive 0.25 credit. The credit_key is a bearer secret.x402credit-packusdcstarter
-
regular pack (pay 1.00 USDC, receive 1.05 credit)POST https://softbot-credits-mainnet.softbot.workers.dev/v1/packs/regular. Pay 1.00 USDC via x402, receive 1.05 credit. The credit_key is a bearer secret.x402credit-packusdcregular
-
larger pack (pay 5.00 USDC, receive 5.50 credit)POST https://softbot-credits-mainnet.softbot.workers.dev/v1/packs/larger. Pay 5.00 USDC via x402, receive 5.50 credit. The credit_key is a bearer secret.x402credit-packusdclarger
How to call
A2A endpoint (HTTP+JSON)
https://softbot-credits-mainnet.softbot.workers.dev/Homepage
https://softbot-studio.pages.dev
Listed in
Directories this entry was found in.
agenstry since 2026-11-10